CVE-2014-3051

Name of the Vulnerable Software and Affected Versions IBM Tivoli Composite Application Manager (ITCAM) for Transactions versions 7.1 through 7.2 before 7.2.0.3 IF28 IBM Tivoli Composite Application Manager (ITCAM) for Transactions versions 7.3 before 7.3.0.1 IF30 IBM Tivoli Composite Application Manager (ITCAM) for Transactions versions 7.4 before 7.4.0.0 IF18

Description The issue allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate, as the Internet Service Monitor (ISM) agent does not verify X.509 certificates from SSL servers.

Recommendations For versions 7.1 through 7.2 before 7.2.0.3 IF28, update to 7.2.0.3 IF28 or later. For versions 7.3 before 7.3.0.1 IF30, update to 7.3.0.1 IF30 or later. For versions 7.4 before 7.4.0.0 IF18, update to 7.4.0.0 IF18 or later.